Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: L7GUP1Tdslwn/vp9yqGEaj5BoKcDcH0ag+b1jLEApkw=
Subject key identifier: 4A:18:78:0B:FF:56:50:3E:E6:AB:0F:FC:16:45:A9:AD:97:03:05:E5
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 019A71B880B9ABE77902C36EAEB07D8F0325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: RSR4NP4J9rRkEvFacnTKeZR1Sf63MeWiWH0prMYoB0E=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:80:b9:ab:e7:79:02:c3:6e:ae:b0:7d:8f:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=4a18780bff56503ee6ab0ffc1645a9ad970305e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:6d:43:8b:87:56:10:8e:bd:2d:28:10:dc:
4b:2b:94:32:ad:11:3c:ab:38:28:f9:fa:c3:69:6a:
1b:5d:c4:f0:a9:f7:b0:c2:8b:9b:d3:ce:05:1d:e2:
44:6c:23:29:f3:7b:4b:14:7c:c7:09:6a:79:66:5f:
bb:ee:86:06:d3:c3:1b:9c:14:cf:1c:d8:af:ce:14:
10:5e:b1:e2:7f:b9:00:a9:df:d6:d3:8e:96:1d:29:
5e:fe:e6:8b:26:3a:c3:c5:5f:f6:01:f8:80:02:53:
41:a5:d6:1c:67:e9:82:85:91:37:90:02:1f:d8:f3:
cf:34:db:ba:2f:9f:5b:9d:b0:ae:aa:c2:f4:d7:38:
27:aa:5d:4b:35:cd:6f:14:4d:8e:99:90:98:4f:8c:
83:95:61:03:0f:f8:aa:d3:49:7e:b8:e3:7a:b8:6b:
81:dd:5e:fc:3d:c6:1d:7d:08:0b:f1:b2:ef:d7:58:
53:95:ad:f7:ed:ad:02:5a:b2:09:ab:c0:11:88:46:
c3:c9:3c:12:a8:c2:d2:2a:4b:13:76:95:a3:cb:6e:
9f:32:ff:a5:e8:29:d5:56:47:21:cf:a1:43:b7:45:
d7:6b:42:9a:3d:57:f1:7c:86:9b:50:f5:b5:a6:b3:
a1:6a:ed:91:58:76:52:32:4b:3c:33:fa:4c:a4:42:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:78:0B:FF:56:50:3E:E6:AB:0F:FC:16:45:A9:AD:97:03:05:E5
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a4:1d:21:cd:e8:64:da:3f:ed:37:c3:f1:12:f3:ca:5d:6b:
b6:e7:5f:d2:56:48:b9:61:08:a1:21:56:aa:75:54:f1:7e:89:
c1:69:79:0b:73:fc:e0:7e:e6:bb:48:2f:cb:0b:2a:31:a8:75:
7a:c6:29:19:80:2f:7a:56:d9:11:e4:c6:8e:5a:b1:97:92:9f:
00:f7:23:f3:35:4a:68:0b:1a:93:2f:87:06:6e:0b:b8:9a:a2:
2e:04:65:5f:10:d5:ca:b4:71:a7:97:4d:f4:14:a9:a1:ce:97:
2b:06:ce:10:95:17:81:94:0d:76:21:e9:5d:28:99:22:d3:7b:
e7:6e:fa:5f:e9:6b:4a:95:e3:af:9f:3b:c0:31:78:32:18:6c:
ae:6d:8b:b9:4b:f4:68:0e:d7:18:38:21:0f:9e:1f:8c:5b:87:
27:a2:bf:5b:e7:07:c8:dd:f1:0a:be:e2:ce:b1:60:3b:fc:0c:
ae:18:ff:69:34:26:9d:a5:49:c5:e9:44:fb:e2:eb:5a:e0:a3:
ac:6b:8f:9c:85:37:83:4d:2c:a3:bc:3c:6a:e2:db:9e:70:77:
c5:23:47:ff:37:12:43:19:e7:05:d1:85:14:27:fe:46:14:60:
37:78:c3:54:51:1c:d9:79:08:e1:ae:84:42:01:cb:e7:f5:6f:
f2:25:0e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIC5q+d5AsNurrB9jwMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Mzg3YzU2YjMzMWZmODRiYzEwZDhhYzkwZTFlMmMxNmYx
NzIzNDUwHhcNMjUxMTExMDcwMTQ4WhcNMjUxMTEyMDcwMTQ4WjAzMTEwLwYDVQQD
Eyg0YTE4NzgwYmZmNTY1MDNlZTZhYjBmZmMxNjQ1YTlhZDk3MDMwNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLttQ4uHVhCOvS0oENxLK5QyrRE8
qzgo+frDaWobXcTwqfewwoub084FHeJEbCMp83tLFHzHCWp5Zl+77oYG08MbnBTP
HNivzhQQXrHif7kAqd/W046WHSle/uaLJjrDxV/2AfiAAlNBpdYcZ+mChZE3kAIf
2PPPNNu6L59bnbCuqsL01zgnql1LNc1vFE2OmZCYT4yDlWEDD/iq00l+uON6uGuB
3V78PcYdfQgL8bLv11hTla337a0CWrIJq8ARiEbDyTwSqMLSKksTdpWjy26fMv+l
6CnVVkchz6FDt0XXa0KaPVfxfIabUPW1prOhau2RWHZSMks8M/pMpEKUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoYeAv/VlA+5qsP/BZFqa2XAwXlMB8GA1UdIwQY
MBaAFEY4fFazMf+EvBDYrJDh4sFvFyNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUt
MjNiYjM5YTgzNDgxLzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUtMjNiYjM5YTgzNDgx
LzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqQdIc3o
ZNo/7TfD8RLzyl1rtudf0lZIuWEIoSFWqnVU8X6JwWl5C3P84H7mu0gvywsqMah1
esYpGYAvelbZEeTGjlqxl5KfAPcj8zVKaAsaky+HBm4LuJqiLgRlXxDVyrRxp5dN
9BSpoc6XKwbOEJUXgZQNdiHpXSiZItN75276X+lrSpXjr587wDF4Mhhsrm2LuUv0
aA7XGDghD54fjFuHJ6K/W+cHyN3xCr7izrFgO/wMrhj/aTQmnaVJxelE++LrWuCj
rGuPnIU3g00so7w8auLbnnB3xSNH/zcSQxnnBdGFFCf+RhRgN3jDVFEc2XkI4a6E
QgHL5/Vv8iUOig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:58 2025 by rpki-client